TYPO3-EXT-SA-2026-011: Multiple vulnerabilities in extension "Faceted Search" (ke_search)
It has been discovered that the extension "Faceted Search" (ke_search) is vulnerable to XML External Entity injection, Path Traversal and Information Disclosure.
Read moreTYPO3-EXT-SA-2026-010: SQL Injection in extension "News system" (news)
It has been discovered that the extension "News system" (news) is vulnerable to SQL Injection.
TYPO3-EXT-SA-2026-009: Broken Access Control in extension "Frontend User Registration" (sf_register)
It has been discovered that the extension "Frontend User Registration" (sf_register) is vulnerable to Broken Access Control.
TYPO3-EXT-SA-2026-008: Remote Code Execution in extension "Site Crawler" (crawler)
It has been discovered that the extension "Site Crawler" (crawler) is vulnerable to Remote Code Execution.
Changes to the TYPO3 Bug Bounty Program
Extension security reporting continues — financial rewards for extension findings will end on 31 May 2026.
SEAL Extension Takes the Next Step: Advanced Search, GEO Features and AI Vector Integration
In this update, Tim Lochmüller reports on his Q1/2026 Community Budget project, confirming that all three milestones of the SEAL ecosystem expansion — covering advanced search, geographical features, and AI vector integration — have been successfully reached.
The Next Wave of TYPO3
At TYPO3 Surf Camp in Fuerteventura, a new generation of contributors is stepping forward. Reflections on mentorship, community, and the future of TYPO3.
TYPO3 14.3.1 and 13.4.29 maintenance releases published
The versions 14.3.1 and 13.4.29 of the TYPO3 Enterprise Content Management System have just been released.
This Month in TYPO3: April, 2026
April was TYPO3's biggest month of the year so far. The TYPO3 v14 LTS release landed on the 21st — redesigned backend, Camino theme baked in, three-plus years of free security support.
TYPO3 Contribution in Numbers: April 2026
See the full recap of TYPO3's April core contributions with 71 contributors, 214 reviews, bug fixes, features, and a big thank-you to our developers.